34d59fbf68fdf0ba5c3cbffb43bf0e9d6643b931bce7f7d56f587977aff41374 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a17a7f48bc2d36ca9907be9be0ca9319
Size

242KB
Sample

240224-k319ksgc4w
MD5

a17a7f48bc2d36ca9907be9be0ca9319
SHA1

3492242d87c9ab9dca9825fa03ac6e1ade37314c
SHA256

34d59fbf68fdf0ba5c3cbffb43bf0e9d6643b931bce7f7d56f587977aff41374
SHA512

df461cd8b475552ae0f3edd2e1a17ddd40e98f9d7884ecb5d7d0a1e7dca61b60b3453e92db498e288ca425e341065501b4e78c58fd87b70ed9b52d10f8ad3abf
SSDEEP

3072:tVAY+tsLWvp1peb93fOSY5A7W+1PuLCOSG3ybd6Z5DP1p9EFb3ufhbk4Vd0AZUCc:tCYWjeb9lYoK+G3aC5DP1pirupk/d7D

Score

7^/10

Malware Config

Targets

- Target
  
  a17a7f48bc2d36ca9907be9be0ca9319
- Size
  
  242KB
- MD5
  
  a17a7f48bc2d36ca9907be9be0ca9319
- SHA1
  
  3492242d87c9ab9dca9825fa03ac6e1ade37314c
- SHA256
  
  34d59fbf68fdf0ba5c3cbffb43bf0e9d6643b931bce7f7d56f587977aff41374
- SHA512
  
  df461cd8b475552ae0f3edd2e1a17ddd40e98f9d7884ecb5d7d0a1e7dca61b60b3453e92db498e288ca425e341065501b4e78c58fd87b70ed9b52d10f8ad3abf
- SSDEEP
  
  3072:tVAY+tsLWvp1peb93fOSY5A7W+1PuLCOSG3ybd6Z5DP1p9EFb3ufhbk4Vd0AZUCc:tCYWjeb9lYoK+G3aC5DP1pirupk/d7D
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2